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1-15. (Canceled) 

16. (Withdrawn) A method for populating password data in a target datastore of a 
target user authenticator after migration from a source user authenticator having a 
source datastore, while also responding to user requests for information, the method 
comprising: 

migrating the source datastore to the target datastore, wherein the source 
datastore comprises user identification data and user authentication data, wherein the 
source datastore is associated with a source user authenticator, wherein the target 
datastore is associated with a target user authenticator, and wherein the target user 
authenticator is in communication with the source user authenticator; 

intercepting, by an interceptor, a request to the source user authenticator from a 
user seeking access to information protected by the target user authenticator, wherein 
the interceptor prompts the user for an identification, receives the identification from the 
user, locates a corresponding identification in the target datastore, and searches the 
target datastore for a password associated with the identification; and 

determining that there is no password in the target datastore associated with the 
identification: 

forwarding the original intercepted request to the source user 
authenticator, 
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using the source user authenticator to prompt for and receive the 
identification and a password from the user, 

capturing the password provided to the source user authenticator by the 
user in response to prompting by the source authenticator, 

monitoring the source user authenticator for an approval response, 

populating the target datastore with the captured password upon receipt 
by the target datastore of an approval response from the source user 
authenticator, and 

associating the captured password with the corresponding identification. 

17. (Withdrawn) The method of claim 16, wherein after populating the target 
datastore, further comprising prompting for and receiving from the user the password 
associated with the identification. 

18. (Withdrawn) The method of claim 17, wherein the action of prompting for and 
receiving from the user the password associated with the identification comprises 
prompting for and receiving from the user the identification and the password 
associated with the identification. 

19-21. (Canceled) 



72126 v2/4000.03400 



3 



Attorney Docket No: IDF 1 560 (4000-03400) Patent 

22. (Previously Presented) A method for populating password data to a target 
datastore of a target user authenticator after migration from a source user authenticator 
having a source datastore, while also responding to user requests for information, the 
method comprising: 

migrating the source datastore to the target datastore, wherein the source 
datastore comprises user identification data and user authentication data, wherein the 
source datastore is associated with a source user authenticator, wherein the target 
datastore is associated with a target user authenticator, and wherein the target user 
authenticator is in communication with the source user authenticator; 

intercepting, with an interceptor, a request to the source user authenticator from 
a user seeking access to information protected by the target user authenticator, wherein 
the interceptor prompts the user for an identification, receives the identification from the 
user, locates a corresponding identification in the target datastore, and searches the 
target datastore for a user authentication data associated with the corresponding 
identification; 

forwarding the original intercepted request to the source user authenticator upon 
determining that the target datastore does not include a user authentication data 
associated with the corresponding identification; 

using the source user authenticator to prompt for and receive the identification 
and user authentication data from the user, the target user authenticator: monitors the 
source user authenticator for an approval response, and upon an approval response 
from the source user authenticator, captures the user authentication data provided to 
the source user authenticator by the user, populates the target datastore with the 
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captured user authentication data, and associates the captured user authentication data 
with the corresponding identification. 



23. (Previously Presented) The method of claim 22, wherein after populating the 
target datastore, further comprising prompting for and receiving from the user the user 
authentication data associated with the identification. 

24. (Previously Presented) The method of claim 23, wherein the action of 
prompting for and receiving from the user the user authentication data associated with 
the identification comprises prompting for and receiving from the user the identification 
and the user authentication data associated with the identification. 

25. (Previously Presented) The method of claim 22, wherein migrating the source 
datastore to the target datastore comprises: 

reading unencrypted data from the source datastore, wherein the source 
datastore contains encrypted user authentication data and other unencrypted data, 
wherein the unencrypted data represents data for multiple users each having an 
associated user identification and an associated user authentication data; 

converting the unencrypted data to be compatible with the target datastore; and 

populating the target datastore with the converted data. 

26. (Previously Presented) The method of claim 22 further comprising: 
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authenticating the received identification using the target user authenticator upon 
determining that the target datastore includes user authentication data associated with 
the corresponding identification. 

27. (Previously Presented) The method of claim 26, wherein authenticating the 
received identification further comprises prompting for an receiving from the user the 
user authentication data associated with the corresponding identification. 

28. (Previously Presented) The method of claim 22, wherein the target datastore 
is an LDAP compliant directory service. 

29. (Previously Presented) The method of claim 22, wherein the target datastore 
is a relational database. 

30. (Previously Presented) The method of claim 22, wherein the source datastore 
is a relational database. 

31 . (Previously Presented) The method of claim 22, wherein the user is a person. 

32. (Previously Presented) The method of claim 22, wherein the user is a 
software object. 
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33. (Previously Presented) The method of claim 22, wherein the user 
authentication data is a password. 



34. (Previously Presented) The method of claim 22, wherein receiving user 
authentication form a user further comprises: 

prompting for and receiving the identification and the user authentication data 
from the user after the initial submission of the identification from the user. 

35. (Previously Presented) The method of claim 22, wherein the interceptor is a 
servlet. 
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